@hed-hog/core 0.0.387 → 0.0.390

package/README.md

@@ -11,11 +11,12 @@ The `@hed-hog/core` module is the core of the HedHog monorepo, responsible for p
 ## 2. Scope and responsibilities
 
 - Authentication and authorization management, including MFA, WebAuthn, password recovery, sessions, and social login via OAuth (Google, Facebook, GitHub, Microsoft, Microsoft Entra ID, Apple, LinkedIn) with a multi-app callback hub.
-- Artificial intelligence services for chat and AI agents with support for OpenAI and Gemini.
+- Artificial intelligence services for chat and AI agents with support for OpenAI, Gemini and DeepSeek.
 - Management of dashboards, components, roles, and associated users.
 - Operating system, hardware, database, and installed-module information.
 - Data validation and handling via DTOs and integration with the Prisma ORM.
 - Internationalization and pagination support.
+- Shared CAPTCHA verification for public forms (`CaptchaService`), supporting reCAPTCHA, Cloudflare Turnstile and Altcha. It has no endpoints of its own: other modules inject it and call `verifyForProfile(integrationProfileId, token)`, so credentials stay in an `integration_profile` and a form only stores the profile id. `getPublicConfig()` returns the site key for the front end — the secret never leaves the server.
 
 ## 3. Endpoints
 
@@ -23,12 +24,12 @@ The `@hed-hog/core` module is the core of the HedHog monorepo, responsible for p
 
 | Method | Path                    | Auth         | Description                                        | Parameters / Query / Body                                                                                   | Response                                                                                      | Common Errors                          |
 |--------|-------------------------|--------------|-----------------------------------------------------|-------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------|-------------------------------------|
-| POST   | `/ai/chat`              | Authenticated  | Chats with AI, optionally sending a file.     | Body: `ChatDTO` (message: string, provider?: 'openai'|'gemini', model?: string, systemPrompt?: string, file_id?: number)<br>File: optional | `{ provider: string, model: string, content: string }`                                       | 400: API key not configured      |
-| POST   | `/ai/agent`             | Authenticated  | Creates an AI agent.                                | Body: `CreateAgentDTO` (slug: string, provider?: 'openai'|'gemini', model?: string, instructions?: string)   | Created or existing agent object                                                           | 400: Slug already exists                 |
+| POST   | `/ai/chat`              | Authenticated  | Chats with AI, optionally sending a file.     | Body: `ChatDTO` (message: string, provider?: 'openai'|'gemini'|'deepseek', model?: string, systemPrompt?: string, file_id?: number)<br>File: optional | `{ provider: string, model: string, content: string }`                                       | 400: API key not configured      |
+| POST   | `/ai/agent`             | Authenticated  | Creates an AI agent.                                | Body: `CreateAgentDTO` (slug: string, provider?: 'openai'|'gemini'|'deepseek', model?: string, instructions?: string)   | Created or existing agent object                                                           | 400: Slug already exists                 |
 | GET    | `/ai/agent`             | Authenticated  | Lists AI agents with pagination.                   | Query: pagination (page?: number, pageSize?: number, search?: string)                                         | Paginated list of agents                                                              | -                                   |
 | GET    | `/ai/agent/id/:agentId` | Authenticated  | Gets an AI agent by ID.                           | Path param: `agentId` (int)                                                                                  | Agent object                                                                              | 404: Agent not found          |
 | GET    | `/ai/agent/:slug`       | Authenticated  | Gets an AI agent by slug.                         | Path param: `slug` (string)                                                                                  | Agent object                                                                              | 404: Agent not found          |
-| PATCH  | `/ai/agent/:agentId`    | Authenticated  | Updates an AI agent.                               | Path param: `agentId` (int)<br>Body: `UpdateAgentDTO` (slug?: string, provider?: 'openai'|'gemini', model?: string, instructions?: string) | Updated agent object                                                                   | 404: Agent not found<br>400: Duplicate slug |
+| PATCH  | `/ai/agent/:agentId`    | Authenticated  | Updates an AI agent.                               | Path param: `agentId` (int)<br>Body: `UpdateAgentDTO` (slug?: string, provider?: 'openai'|'gemini'|'deepseek', model?: string, instructions?: string) | Updated agent object                                                                   | 404: Agent not found<br>400: Duplicate slug |
 | DELETE | `/ai/agent`             | Authenticated  | Bulk-deletes AI agents.                        | Body: `DeleteDTO` (ids: number[])                                                                             | `{ count: number }`                                                                         | 404: One or more agents not found |
 | POST   | `/ai/agent/:slug/chat`  | Authenticated  | Chats with a specific AI agent, with an optional file. | Path param: `slug` (string)<br>Body: `ChatAgentDTO` (message: string, file_id?: number)<br>File: optional      | `{ slug: string, provider: string, model: string, content: string }`                        | 404: Agent not found          |
 
@@ -182,7 +183,7 @@ The `@hed-hog/core` module is the core of the HedHog monorepo, responsible for p
 ```ts
 {
   message: string; // required
-  provider?: 'openai' | 'gemini'; // optional, default 'openai'
+  provider?: 'openai' | 'gemini' | 'deepseek'; // optional, default 'openai'
   model?: string; // optional
   systemPrompt?: string; // optional
   file_id?: number; // optional
@@ -203,7 +204,7 @@ The `@hed-hog/core` module is the core of the HedHog monorepo, responsible for p
 ```ts
 {
   slug: string; // required
-  provider?: 'openai' | 'gemini'; // optional, default 'openai'
+  provider?: 'openai' | 'gemini' | 'deepseek'; // optional, default 'openai'
   model?: string; // optional
   instructions?: string; // optional
 }
@@ -214,7 +215,7 @@ The `@hed-hog/core` module is the core of the HedHog monorepo, responsible for p
 ```ts
 {
   slug?: string;
-  provider?: 'openai' | 'gemini';
+  provider?: 'openai' | 'gemini' | 'deepseek';
   model?: string;
   instructions?: string;
 }
@@ -454,7 +455,7 @@ The `@hed-hog/core` module is the core of the HedHog monorepo, responsible for p
 
 - **400 Bad Request**
 
-  - API key not configured for OpenAI or Gemini.
+  - API key not configured for OpenAI, Gemini or DeepSeek.
   - AI agent slug already exists.
   - Invalid or expired verification code.
   - Refresh token not provided.
@@ -496,7 +497,7 @@ purpose: Stores AI agents configured in the system.
 columns:
   - id: integer, PK, auto-increment
   - slug: string, unique, not null
-  - provider: enum('openai', 'gemini'), not null
+  - provider: enum('openai', 'gemini', 'deepseek'), not null
   - model: string, nullable
   - instructions: string, nullable
   - external_agent_id: string, nullable
@@ -515,7 +516,7 @@ indexes:
   - id (PK)
   - slug (unique)
 enums:
-  - provider: ['openai', 'gemini']
+  - provider: ['openai', 'gemini', 'deepseek']
 ```
 
 ### user
@@ -770,7 +771,7 @@ indexes:
 
 ## 8. Relevant business rules
 
-- AI agents can be created, updated, and deleted, with direct integration with the OpenAI and Gemini APIs.
+- AI agents can be created, updated, and deleted, with direct integration with the OpenAI, Gemini and DeepSeek APIs.
 - AI chat supports file attachments, with text extraction for PDFs and text files.
 - Mandatory MFA can be configured, with support for email, TOTP, and WebAuthn.
 - Access and refresh tokens are managed securely, including HTTP-only cookies.

package/dist/access-log/access-log.interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-log.interceptor.d.ts","sourceRoot":"","sources":["../../src/access-log/access-log.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAEhB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAO,MAAM,MAAM,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,qBACa,oBAAqB,YAAW,eAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB;gBAAhB,gBAAgB,EAAE,gBAAgB;IAE/D,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC;CAwBzE"}
+{"version":3,"file":"access-log.interceptor.d.ts","sourceRoot":"","sources":["../../src/access-log/access-log.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAEhB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAO,MAAM,MAAM,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,qBACa,oBAAqB,YAAW,eAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB;gBAAhB,gBAAgB,EAAE,gBAAgB;IAE/D,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC;CA0BzE"}

package/dist/access-log/access-log.interceptor.js

@@ -30,8 +30,10 @@ let AccessLogInterceptor = class AccessLogInterceptor {
         return next.handle().pipe((0, rxjs_1.tap)(() => {
             var _a, _b, _c, _d;
             const userId = (_a = request.auth) === null || _a === void 0 ? void 0 : _a.sub;
-            const forwarded = request.headers['x-forwarded-for'];
-            const ip = forwarded ? forwarded.split(',')[0].trim() : ((_b = request.ip) !== null && _b !== void 0 ? _b : '');
+            // request.ip já resolve o IP real do cliente respeitando `trust proxy` (main.ts):
+            // ler x-forwarded-for na mão aqui pegava o primeiro valor da lista, que é
+            // exatamente o mais fácil de forjar pelo próprio cliente.
+            const ip = (_b = request.ip) !== null && _b !== void 0 ? _b : '';
             const userAgent = (_c = request.headers['user-agent']) !== null && _c !== void 0 ? _c : '';
             const method = (_d = request.method) !== null && _d !== void 0 ? _d : '';
             this.accessLogService.recordHttp({ userId, ip, userAgent, method, path });

package/dist/access-log/access-log.interceptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-log.interceptor.js","sourceRoot":"","sources":["../../src/access-log/access-log.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAKwB;AACxB,+BAAuC;AACvC,6DAAwD;AAGjD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IAAG,CAAC;IAEnE,SAAS,CAAC,OAAyB,EAAE,IAAiB;;QACpD,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,GAAW,MAAA,OAAO,CAAC,GAAG,mCAAI,EAAE,CAAC;QAEvC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,GAAG,EAAE;;YACP,MAAM,MAAM,GAAuB,MAAA,OAAO,CAAC,IAAI,0CAAE,GAAG,CAAC;YACrD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CAAC;YAC3E,MAAM,EAAE,GAAW,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAA,OAAO,CAAC,EAAE,mCAAI,EAAE,CAAC,CAAC;YACnF,MAAM,SAAS,GAAW,MAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAY,mCAAI,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAW,MAAA,OAAO,CAAC,MAAM,mCAAI,EAAE,CAAC;YAE5C,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA3BY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAEoC,qCAAgB;GADpD,oBAAoB,CA2BhC"}
+{"version":3,"file":"access-log.interceptor.js","sourceRoot":"","sources":["../../src/access-log/access-log.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAKwB;AACxB,+BAAuC;AACvC,6DAAwD;AAGjD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IAAG,CAAC;IAEnE,SAAS,CAAC,OAAyB,EAAE,IAAiB;;QACpD,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,GAAW,MAAA,OAAO,CAAC,GAAG,mCAAI,EAAE,CAAC;QAEvC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,GAAG,EAAE;;YACP,MAAM,MAAM,GAAuB,MAAA,OAAO,CAAC,IAAI,0CAAE,GAAG,CAAC;YACrD,kFAAkF;YAClF,0EAA0E;YAC1E,0DAA0D;YAC1D,MAAM,EAAE,GAAW,MAAA,OAAO,CAAC,EAAE,mCAAI,EAAE,CAAC;YACpC,MAAM,SAAS,GAAW,MAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAY,mCAAI,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAW,MAAA,OAAO,CAAC,MAAM,mCAAI,EAAE,CAAC;YAE5C,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA7BY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAEoC,qCAAgB;GADpD,oBAAoB,CA6BhC"}

package/dist/ai/ai-attachment.fragments.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Framing mecânico de anexo enviado ao modelo — deliberadamente FORA do registry
+ * de `ai_instruction` (ver o docblock de `ai.prompts.ts`).
+ *
+ * Estes marcadores andam em lockstep com `isTextMime`/`isPdfMime`/`extractPdfText`
+ * em `ai.service.ts`: são o que diz ao modelo que o texto a seguir é o conteúdo de
+ * um arquivo, e não a mensagem do usuário. Antes estavam copiados literalmente nos
+ * dois caminhos de provider (Gemini e OpenAI), onde uma cópia podia ser corrigida
+ * e a outra esquecida sem gerar erro nenhum.
+ *
+ * O `\n\n` inicial faz parte do bloco: no Gemini ele abre um `part` separado, no
+ * OpenAI ele é a junta logo depois de `${message}`. Nos dois casos os bytes finais
+ * são exatamente os mesmos.
+ *
+ * Coberto byte a byte por `ai-attachment.fragments.spec.ts` — não "arrume" o texto.
+ */
+/** Bloco que embrulha o conteúdo textual extraído de um anexo. */
+export declare function attachedFileBlock(filename: string, body: string): string;
+/** Usado quando o anexo não é texto nem PDF legível e vai apenas descrito. */
+export declare function binaryAttachmentMarker(filename: string, mimeType: string, bytes: number): string;
+/** Usado quando `extractPdfText` não consegue extrair nada do PDF. */
+export declare function unreadablePdfMarker(filename: string): string;
+//# sourceMappingURL=ai-attachment.fragments.d.ts.map

package/dist/ai/ai-attachment.fragments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-attachment.fragments.d.ts","sourceRoot":"","sources":["../../src/ai/ai-attachment.fragments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/ai/ai-attachment.fragments.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * Framing mecânico de anexo enviado ao modelo — deliberadamente FORA do registry
+ * de `ai_instruction` (ver o docblock de `ai.prompts.ts`).
+ *
+ * Estes marcadores andam em lockstep com `isTextMime`/`isPdfMime`/`extractPdfText`
+ * em `ai.service.ts`: são o que diz ao modelo que o texto a seguir é o conteúdo de
+ * um arquivo, e não a mensagem do usuário. Antes estavam copiados literalmente nos
+ * dois caminhos de provider (Gemini e OpenAI), onde uma cópia podia ser corrigida
+ * e a outra esquecida sem gerar erro nenhum.
+ *
+ * O `\n\n` inicial faz parte do bloco: no Gemini ele abre um `part` separado, no
+ * OpenAI ele é a junta logo depois de `${message}`. Nos dois casos os bytes finais
+ * são exatamente os mesmos.
+ *
+ * Coberto byte a byte por `ai-attachment.fragments.spec.ts` — não "arrume" o texto.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.attachedFileBlock = attachedFileBlock;
+exports.binaryAttachmentMarker = binaryAttachmentMarker;
+exports.unreadablePdfMarker = unreadablePdfMarker;
+/** Bloco que embrulha o conteúdo textual extraído de um anexo. */
+function attachedFileBlock(filename, body) {
+    return `\n\n[Attached file: ${filename}]\n${body}`;
+}
+/** Usado quando o anexo não é texto nem PDF legível e vai apenas descrito. */
+function binaryAttachmentMarker(filename, mimeType, bytes) {
+    return `[Binary attachment: ${filename} | ${mimeType} | ${bytes} bytes]`;
+}
+/** Usado quando `extractPdfText` não consegue extrair nada do PDF. */
+function unreadablePdfMarker(filename) {
+    return `[PDF attachment with unreadable text: ${filename}]`;
+}
+//# sourceMappingURL=ai-attachment.fragments.js.map

package/dist/ai/ai-attachment.fragments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-attachment.fragments.js","sourceRoot":"","sources":["../../src/ai/ai-attachment.fragments.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAGH,8CAEC;AAGD,wDAMC;AAGD,kDAEC;AAjBD,kEAAkE;AAClE,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,IAAY;IAC9D,OAAO,uBAAuB,QAAQ,MAAM,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,QAAgB,EAChB,KAAa;IAEb,OAAO,uBAAuB,QAAQ,MAAM,QAAQ,MAAM,KAAK,SAAS,CAAC;AAC3E,CAAC;AAED,sEAAsE;AACtE,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,yCAAyC,QAAQ,GAAG,CAAC;AAC9D,CAAC"}

package/dist/ai/ai.controller.d.ts

@@ -8,18 +8,14 @@ export declare class AiController {
     private readonly aiService;
     constructor(aiService: AiService);
     chat(data: ChatDTO, file?: MulterFile): Promise<{
-        provider: "openai";
-        model: string;
-        content: string;
-    } | {
-        provider: "gemini";
+        provider: "openai" | "deepseek" | "gemini";
         model: string;
         content: string;
     }>;
     createAgent(data: CreateAgentDTO): Promise<{
         id: number;
         slug: string;
-        provider: "openai" | "gemini";
+        provider: "openai" | "deepseek" | "gemini";
         model: string | null;
         instructions: string | null;
         external_agent_id: string | null;
@@ -30,7 +26,7 @@ export declare class AiController {
         data: {
             id: number;
             slug: string;
-            provider: "openai" | "gemini";
+            provider: "openai" | "deepseek" | "gemini";
             model: string | null;
             instructions: string | null;
             external_agent_id: string | null;
@@ -45,7 +41,7 @@ export declare class AiController {
     getAgentById(agentId: number): Promise<{
         id: number;
         slug: string;
-        provider: "openai" | "gemini";
+        provider: "openai" | "deepseek" | "gemini";
         model: string | null;
         instructions: string | null;
         external_agent_id: string | null;
@@ -55,7 +51,7 @@ export declare class AiController {
     getAgent(slug: string): Promise<{
         id: number;
         slug: string;
-        provider: "openai" | "gemini";
+        provider: "openai" | "deepseek" | "gemini";
         model: string | null;
         instructions: string | null;
         external_agent_id: string | null;
@@ -65,7 +61,7 @@ export declare class AiController {
     updateAgent(agentId: number, data: UpdateAgentDTO): Promise<{
         id: number;
         slug: string;
-        provider: "openai" | "gemini";
+        provider: "openai" | "deepseek" | "gemini";
         model: string | null;
         instructions: string | null;
         external_agent_id: string | null;
@@ -77,12 +73,7 @@ export declare class AiController {
     }>;
     chatWithAgent(slug: string, data: ChatAgentDTO, file?: MulterFile): Promise<{
         slug: string;
-        provider: "openai";
-        model: string;
-        content: string;
-    } | {
-        slug: string;
-        provider: "gemini";
+        provider: "openai" | "deepseek" | "gemini";
         model: string;
         content: string;
     }>;

package/dist/ai/ai.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.controller.d.ts","sourceRoot":"","sources":["../../src/ai/ai.controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,qBAEa,YAAY;IAGrB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAKjC,IAAI,CAAS,IAAI,EAAE,OAAO,EAAkB,IAAI,CAAC,EAAE,UAAU;;;;;;;;;IAK7D,WAAW,CAAS,IAAI,EAAE,cAAc;;;;;;;;;;IAKxC,UAAU,CAAe,gBAAgB,KAAA;;;;;;;;;;;;;;;;IAKzC,YAAY,CAAiC,OAAO,EAAE,MAAM;;;;;;;;;;IAK5D,QAAQ,CAAgB,IAAI,EAAE,MAAM;;;;;;;;;;IAKpC,WAAW,CACiB,OAAO,EAAE,MAAM,EACvC,IAAI,EAAE,cAAc;;;;;;;;;;IAMxB,YAAY,CAAS,IAAI,EAAE,SAAS;;;IAMpC,aAAa,CACF,IAAI,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY,EACV,IAAI,CAAC,EAAE,UAAU;;;;;;;;;;;CAIpC"}
+{"version":3,"file":"ai.controller.d.ts","sourceRoot":"","sources":["../../src/ai/ai.controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,qBAEa,YAAY;IAGrB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAKjC,IAAI,CAAS,IAAI,EAAE,OAAO,EAAkB,IAAI,CAAC,EAAE,UAAU;;;;;IAK7D,WAAW,CAAS,IAAI,EAAE,cAAc;;;;;;;;;;IAKxC,UAAU,CAAe,gBAAgB,KAAA;;;;;;;;;;;;;;;;IAKzC,YAAY,CAAiC,OAAO,EAAE,MAAM;;;;;;;;;;IAK5D,QAAQ,CAAgB,IAAI,EAAE,MAAM;;;;;;;;;;IAKpC,WAAW,CACiB,OAAO,EAAE,MAAM,EACvC,IAAI,EAAE,cAAc;;;;;;;;;;IAMxB,YAAY,CAAS,IAAI,EAAE,SAAS;;;IAMpC,aAAa,CACF,IAAI,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY,EACV,IAAI,CAAC,EAAE,UAAU;;;;;;CAIpC"}

package/dist/ai/ai.prompts.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Core AI prompts.
+ *
+ * Deliberately NOT moved here: the attachment wrappers (`[Attached file: …]`,
+ * `[Binary attachment: …]`, `[PDF attachment with unreadable text: …]`). Those are
+ * mechanical framing that must stay in lockstep with `isTextMime`/`isPdfMime`/
+ * `buildOpenAiUserContent` on the parsing side — editable prose they are not.
+ * They now live in `ai-attachment.fragments.ts` (single copy, in code), covered
+ * byte for byte by `ai-attachment.fragments.spec.ts`.
+ */
+export declare const CORE_AI_PROMPT_SLUGS: {
+    readonly agentDefaultInstructions: "task.core.ai-agent.default-instructions.system";
+};
+/** Used when an agent is created without explicit instructions. */
+export declare const AGENT_DEFAULT_INSTRUCTIONS_PROMPT = "You are the assistant identified by slug {{slug}}.";
+//# sourceMappingURL=ai.prompts.d.ts.map

package/dist/ai/ai.prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.prompts.d.ts","sourceRoot":"","sources":["../../src/ai/ai.prompts.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,eAAO,MAAM,oBAAoB;;CAEvB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,iCAAiC,uDACQ,CAAC"}

package/dist/ai/ai.prompts.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_DEFAULT_INSTRUCTIONS_PROMPT = exports.CORE_AI_PROMPT_SLUGS = void 0;
+const ai_prompt_registry_1 = require("../ai-instruction/ai-prompt-registry");
+/**
+ * Core AI prompts.
+ *
+ * Deliberately NOT moved here: the attachment wrappers (`[Attached file: …]`,
+ * `[Binary attachment: …]`, `[PDF attachment with unreadable text: …]`). Those are
+ * mechanical framing that must stay in lockstep with `isTextMime`/`isPdfMime`/
+ * `buildOpenAiUserContent` on the parsing side — editable prose they are not.
+ * They now live in `ai-attachment.fragments.ts` (single copy, in code), covered
+ * byte for byte by `ai-attachment.fragments.spec.ts`.
+ */
+exports.CORE_AI_PROMPT_SLUGS = {
+    agentDefaultInstructions: 'task.core.ai-agent.default-instructions.system',
+};
+/** Used when an agent is created without explicit instructions. */
+exports.AGENT_DEFAULT_INSTRUCTIONS_PROMPT = 'You are the assistant identified by slug {{slug}}.';
+(0, ai_prompt_registry_1.registerAiPrompts)([
+    {
+        slug: exports.CORE_AI_PROMPT_SLUGS.agentDefaultInstructions,
+        name: 'AI agent — instruções padrão',
+        moduleSlug: 'core',
+        locale: 'en',
+        fallback: exports.AGENT_DEFAULT_INSTRUCTIONS_PROMPT,
+        variables: {
+            slug: {
+                type: 'string',
+                required: true,
+                description: 'Slug do agente sendo criado.',
+                sample: 'finance-payable-extractor',
+            },
+        },
+    },
+]);
+//# sourceMappingURL=ai.prompts.js.map

package/dist/ai/ai.prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.prompts.js","sourceRoot":"","sources":["../../src/ai/ai.prompts.ts"],"names":[],"mappings":";;;AAAA,6EAAyE;AAEzE;;;;;;;;;GASG;AAEU,QAAA,oBAAoB,GAAG;IAClC,wBAAwB,EAAE,gDAAgD;CAClE,CAAC;AAEX,mEAAmE;AACtD,QAAA,iCAAiC,GAC5C,oDAAoD,CAAC;AAEvD,IAAA,sCAAiB,EAAC;IAChB;QACE,IAAI,EAAE,4BAAoB,CAAC,wBAAwB;QACnD,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,yCAAiC;QAC3C,SAAS,EAAE;YACT,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,8BAA8B;gBAC3C,MAAM,EAAE,2BAA2B;aACpC;SACF;KACF;CACF,CAAC,CAAC"}

package/dist/ai/ai.service.d.ts

@@ -2,6 +2,8 @@ import { PaginationDTO } from '@hed-hog/api-pagination';
 import { PrismaService } from '@hed-hog/api-prisma';
 import { OnModuleInit } from '@nestjs/common';
 import { AiExecutionService } from '../ai-instruction/ai-execution.service';
+import { AiPromptResolverService, type PromptSource } from '../ai-instruction/ai-prompt-resolver.service';
+import type { TemplateVars } from '../ai-instruction/ai-prompt-template.util';
 import { DeleteDTO } from '../dto/delete.dto';
 import { FileService } from '../file/file.service';
 import { SettingService } from '../setting/setting.service';
@@ -9,7 +11,19 @@ import { ChatAgentDTO } from './dto/chat-agent.dto';
 import { ChatDTO } from './dto/chat.dto';
 import { CreateAgentDTO } from './dto/create-agent.dto';
 import { UpdateAgentDTO } from './dto/update-agent.dto';
-type AiProvider = 'openai' | 'gemini';
+type AiProvider = 'openai' | 'gemini' | 'deepseek';
+/**
+ * Optional per-call model tuning.
+ *
+ * These are only sent to the provider when a value is present: the request
+ * bodies must stay byte-identical to what they were before this existed, since
+ * some newer models reject `temperature` / `max_tokens` outright.
+ */
+export type AiChatModelParams = {
+    temperature?: number | null;
+    maxTokens?: number | null;
+    responseFormat?: 'text' | 'json_object';
+};
 type AiAgentRecord = {
     id: number;
     slug: string;
@@ -25,19 +39,47 @@ export declare class AiService implements OnModuleInit {
     private readonly settingService;
     private readonly fileService;
     private readonly aiExecution;
+    private readonly promptResolver;
     private readonly logger;
-    constructor(prismaService: PrismaService, settingService: SettingService, fileService: FileService, aiExecution: AiExecutionService);
+    constructor(prismaService: PrismaService, settingService: SettingService, fileService: FileService, aiExecution: AiExecutionService, promptResolver: AiPromptResolverService);
     onModuleInit(): Promise<void>;
     chat(data: ChatDTO, file?: MulterFile): Promise<{
-        provider: "openai";
+        provider: AiProvider;
         model: string;
         content: string;
-    } | {
-        provider: "gemini";
+    }>;
+    /**
+     * Chat driven by prompts stored in `ai_instruction`.
+     *
+     * Resolves the system and user prompts by slug in one query, applies whatever
+     * model params the records declare (falling back to `params` and then to the
+     * provider defaults), and reports back where each prompt came from so callers
+     * can log a fallback.
+     */
+    chatWithPrompt(input: {
+        systemPromptSlug?: string;
+        userPromptSlug: string;
+        variables?: TemplateVars;
+        provider?: AiProvider;
+        params?: AiChatModelParams;
+        contextSlug?: string;
+    }): Promise<{
+        provider: AiProvider;
         model: string;
         content: string;
+        promptSources: Record<string, PromptSource>;
     }>;
     createAgent(data: CreateAgentDTO): Promise<AiAgentRecord>;
+    /**
+     * Creates the agent, or updates it when its stored instructions/model drifted
+     * from what the caller now wants.
+     *
+     * `createAgent` returns the existing row untouched, so a caller that passes
+     * instructions on every request would keep whatever the very first call
+     * persisted. That silently defeats an editable prompt: the admin would save a
+     * change and the agent would go on using the original text.
+     */
+    upsertAgent(data: CreateAgentDTO): Promise<AiAgentRecord>;
     listAgents(paginationParams: PaginationDTO): Promise<{
         data: AiAgentRecord[];
         total: number;
@@ -52,12 +94,7 @@ export declare class AiService implements OnModuleInit {
     }>;
     chatWithAgent(slug: string, data: ChatAgentDTO, file?: MulterFile): Promise<{
         slug: string;
-        provider: "openai";
-        model: string;
-        content: string;
-    } | {
-        slug: string;
-        provider: "gemini";
+        provider: AiProvider;
         model: string;
         content: string;
     }>;
@@ -68,7 +105,7 @@ export declare class AiService implements OnModuleInit {
         filename: string;
         mimeType: string;
         bytes: number;
-        mode: "binary" | "image" | "pdf-text" | "text";
+        mode: "binary" | "text" | "image" | "pdf-text";
         textLength: number;
         textSample: string;
         sha256: string;
@@ -76,7 +113,21 @@ export declare class AiService implements OnModuleInit {
     private findAgentBySlug;
     private findAgentById;
     private getDefaultModel;
+    /** Default AI provider used when a caller doesn't specify one (Settings → AI). */
+    private getDefaultProvider;
+    /**
+     * Envia o chat ao provider certo.
+     *
+     * O DeepSeek expõe a mesma API de `/chat/completions` da OpenAI, então reusa o
+     * caminho da OpenAI trocando a base URL — só não aceita imagens, porque os
+     * modelos `deepseek-chat`/`deepseek-reasoner` não têm visão.
+     */
+    private chatWithProvider;
     private getAiApiKey;
+    /** Resolves the active AI integration profile's credentials plus its optional model/timeout overrides. */
+    private getAiProfile;
+    /** Rejects with a timeout error if `promise` doesn't settle within `ms`. */
+    private withTimeout;
     private chatWithOpenAi;
     private createOpenAiAssistant;
     private chatWithOpenAiAssistant;

package/dist/ai/ai.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.service.d.ts","sourceRoot":"","sources":["../../src/ai/ai.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAU,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAOH,YAAY,EACf,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,KAAK,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEtC,KAAK,aAAa,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAQF,qBACa,SAAU,YAAW,YAAY;IAK1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAV9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAIlC,aAAa,EAAE,aAAa,EAE5B,cAAc,EAAE,cAAc,EAE9B,WAAW,EAAE,WAAW,EAExB,WAAW,EAAE,kBAAkB;IAG5C,YAAY;IAeZ,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;;;;;IA2DrC,WAAW,CAAC,IAAI,EAAE,cAAc;IAmChC,UAAU,CAAC,gBAAgB,EAAE,aAAa;;;;;;;IAuC1C,YAAY,CAAC,OAAO,EAAE,MAAM;IAU5B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc;IA6CjD,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,SAAS;;;IAyB/B,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;;;;;;;IAqDjE,cAAc,CAAC,IAAI,EAAE,MAAM;IAU3B,qBAAqB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB1E,qBAAqB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;YA+ChD,eAAe;YAWf,aAAa;IAW3B,OAAO,CAAC,eAAe;YAQT,WAAW;YAgCX,cAAc;YAwCd,qBAAqB;YAoCrB,uBAAuB;YA2FvB,cAAc;YAuEd,KAAK;YAIL,iBAAiB;YAgCjB,sBAAsB;IA+BpC,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,2BAA2B;YAmBrB,cAAc;IAkB5B,OAAO,CAAC,UAAU;CAGnB"}
+{"version":3,"file":"ai.service.d.ts","sourceRoot":"","sources":["../../src/ai/ai.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAU,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAOH,YAAY,EACf,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,uBAAuB,EAIvB,KAAK,YAAY,EAClB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMnD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAO5D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,KAAK,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAYnD;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;CACzC,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAQF,qBACa,SAAU,YAAW,YAAY;IAK1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAZjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAIlC,aAAa,EAAE,aAAa,EAE5B,cAAc,EAAE,cAAc,EAE9B,WAAW,EAAE,WAAW,EAExB,WAAW,EAAE,kBAAkB,EAE/B,cAAc,EAAE,uBAAuB;IAGpD,YAAY;IAUZ,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;IAgD3C;;;;;;;OAOG;IACG,cAAc,CAAC,KAAK,EAAE;QAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,YAAY,CAAC;QACzB,QAAQ,CAAC,EAAE,UAAU,CAAC;QACtB,MAAM,CAAC,EAAE,iBAAiB,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QACV,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;KAC7C,CAAC;IAuEI,WAAW,CAAC,IAAI,EAAE,cAAc;IAmCtC;;;;;;;;OAQG;IACG,WAAW,CAAC,IAAI,EAAE,cAAc;IAwBhC,UAAU,CAAC,gBAAgB,EAAE,aAAa;;;;;;;IAuC1C,YAAY,CAAC,OAAO,EAAE,MAAM;IAU5B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc;IA6CjD,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,SAAS;;;IAyB/B,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;;IAyCjE,cAAc,CAAC,IAAI,EAAE,MAAM;IAU3B,qBAAqB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB1E,qBAAqB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;YA+ChD,eAAe;YAWf,aAAa;IAW3B,OAAO,CAAC,eAAe;IAYvB,kFAAkF;YACpE,kBAAkB;IAMhC;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;YA4BV,WAAW;IAIzB,0GAA0G;YAC5F,YAAY;IAwC1B,4EAA4E;IAC5E,OAAO,CAAC,WAAW;YAgBL,cAAc;YA6Dd,qBAAqB;YAyCrB,uBAAuB;YA2FvB,cAAc;YAiFd,KAAK;YAIL,iBAAiB;YAgCjB,sBAAsB;IAoCpC,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,2BAA2B;YAmBrB,cAAc;IAkB5B,OAAO,CAAC,UAAU;CAGnB"}